Restrict access to topics in Topics

In Topics, stakeholders in your organization might want to make sure that specific topics aren't discovered and exposed to your licensed users. For example, you might be working on a project that you don't want to expose any information about yet. While Microsoft 365 permissions on sites, files, and other resources will prevent users from viewing sensitive information in topics, there are additional safeguards to prevent specific topics from ever being discovered.

While knowledge admins control the settings to prevent topics from being discovered, knowledge managers and other stakeholders need to know how it is done so that they can work collaboratively.

Important

This article describes ways to prevent topics from being identified through AI or viewed in your environment as an additional security safeguard. It is important to note that in Topics, users aren't allowed to view anything in a topic that they aren't allowed to access through Microsoft 365 permissions. Even if a user is able to view a topic, its files, sites, and pages they do not have Microsoft 365 permissions to view won't be visible to the user. Making sure that permissions to sensitive files are correctly set should be your primary security safeguard.

Prevent topics from being identified

Knowledge admins can restrict access to specific topics by preventing them from being found in initial indexing. There are two ways to do this task in the Topics admin settings in the Microsoft 365 admin center.

• Select SharePoint sites to exclude from topic discovery: You can use this setting to prevent specific SharePoint sites from being crawled for topics.
• Exclude topics by name: Admins can use this setting to prevent specific topics from being discovered by name. In the Topics admin settings, an admin can upload a list of topics to be excluded in a CSV file. You can exclude topics that have exact or partial matches of a topic name.

Prevent topics from being viewed by specific users

Knowledge admins can also select who can view topics in your organization. This setting lets you select which licensed users can view all topics. For example, in a pilot environment, you might want to only allow a small group of users to be able to view topics.

Remove topics from being viewed

Knowledge managers can choose to remove topics so that users can no longer see them. On the Manage topics page in the topic center, knowledge managers can choose to remove specific topics to prevent them from being viewed. Topics can be removed regardless of if they are in a suggested, confirmed, or published state.

Removed topics can later be added back as viewable topics if needed.